Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-58280 1 Cmsimple 1 Cmsimple 2026-04-07 8.8 High
CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script to the media directory to execute arbitrary code on the server.